Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

High Severity Vulnerabilities

Found 12675 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin ZeenShare Cross-Site Scripting (1.0.1)
CVE-2014-4606
CWE-79
High
WordPress Plugin zeList Directory Cross-Site Scripting (0.5.11.07)
-
CWE-79
High
WordPress Plugin 2Way VideoCalls and Random Chat-HTML5 Webcam Videochat Cross-Site Scripting (4.41)
-
CWE-79
High
WordPress Plugin AB Google Map Travel (AB-MAP) Multiple Vulnerabilities (3.4)
CVE-2015-2755
CWE-352
High
WordPress Plugin AffiliateWP SQL Injection (1.5.6)
-
CWE-89
High
WordPress Plugin Ajax Search Lite Security Bypass (3.1)
-
CWE-264
High
WordPress Plugin Ajax Search Pro Security Bypass (3.5)
-
CWE-264
High
WordPress Plugin Alert Before Your Post Cross-Site Scripting (0.1.1)
CVE-2011-5107
CWE-79
High
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Cross-Site Scripting (2.0.3)
-
CWE-79
High
WordPress Plugin All in One Webmaster Cross-Site Request Forgery (8.2.3)
CVE-2013-2696
CWE-352
High
WordPress Plugin ALO EasyMail Newsletter Multiple Cross-Site Scripting Vulnerabilities (2.4.7)
-
CWE-79
High
WordPress Plugin Anti-Malware Security and Brute-Force Firewall Cross-Site Scripting (1.2.05.20)
-
CWE-79
High
WordPress Plugin Aspose Cloud eBook Generator Arbitrary File Download (1.0)
-
CWE-22
High
WordPress Plugin Aspose DOC Exporter Arbitrary File Download (1.0)
-
CWE-22
High
WordPress Plugin Aspose Importer & Exporter Arbitrary File Download (2.0)
-
CWE-22
High
WordPress Plugin Aspose PDF Exporter Arbitrary File Download (1.0)
-
CWE-22
High
WordPress Plugin Backend Localization Multiple Cross-Site Scripting Vulnerabilities (1.6.1)
-
CWE-79
High
WordPress Plugin Backup and Restore WordPress-WPBackItUp Cross-Site Request Forgery (1.6.7)
-
CWE-352
High
WordPress Plugin BackupBuddy Information Disclosure (2.2.28)
CVE-2013-2744
CWE-200
High
WordPress Plugin Bad Behavior Multiple Cross-Site Scripting Vulnerabilities (2.2.4)
CVE-2012-4271
CWE-79
High
WordPress Plugin Bookings Cross-Site Scripting (1.8.2)
-
CWE-79
High
WordPress Plugin Bookshelf Cross-Site Scripting (2.0.4)
-
CWE-79
High
WordPress Plugin Broadcast Live Video-Live Streaming:HTML5, WebRTC, HLS, RTSP, RTMP Multiple Cross-Site Scripting Vulnerabilities (4.25.3)
CVE-2013-5714
CWE-79
High
WordPress Plugin Browser Rejector Remote File Inclusion (2.10)
-
CWE-94
High
WordPress Plugin BuddyPress Extended Friendship Request Cross-Site Scripting (1.0.1)
CVE-2013-4944
CWE-79
High
WordPress Plugin BuddyPress PHP Object Injection (2.0.2)
-
CWE-915
High
WordPress Plugin BuddyStream Multiple Cross-Site Scripting Vulnerabilities (2.6.2)
-
CWE-79
High
WordPress Plugin BulletProof Security Cross-Site Scripting (.47)
CVE-2012-4268
CWE-79
High
WordPress Plugin BulletProof Security Multiple Cross-Site Scripting Vulnerabilities (.48.9)
CVE-2013-3487
CWE-79
High
WordPress Plugin Calculated Fields Form Multiple SQL Injection Vulnerabilities (1.0.10)
-
CWE-89
High
WordPress Plugin Calendar Cross-Site Request Forgery (1.3.2)
CVE-2013-2698
CWE-352
High
WordPress Plugin Calendar Event Multi View Multiple Vulnerabilities (1.1.4)
-
CWE-89
High
WordPress Plugin Captcha by BestWebSoft Security Bypass (3.8.7)
-
CWE-284
High
WordPress Plugin Car Demon Multiple Cross-Site Scripting Vulnerabilities (1.0.1)
-
CWE-79
High
WordPress Plugin Category and Page Icons Multiple Vulnerabilities (0.9.1)
-
CWE-434
High
WordPress Plugin Chat Cross-Site Scripting (1.0.8)
-
CWE-79
High
WordPress Plugin CMS Tree Page View Cross-Site Request Forgery (1.2.4)
-
CWE-352
High
WordPress Plugin Comment Attachment Cross-Site Scripting (1.5.5)
CVE-2013-6010
CWE-79
High
WordPress Plugin Connections Business Directory Unspecified Vulnerability (0.7.1.5)
CVE-2011-5254
-
High
WordPress Plugin Contact Form 7 Security Bypass (3.7.1)
CVE-2014-2265
CWE-264
High
WordPress Plugin Contact Form by BestWebSoft Cross-Site Scripting (3.51)
-
CWE-79
High
WordPress Plugin Contact Form by BestWebSoft Cross-Site Scripting (3.34)
-
CWE-79
High
WordPress Plugin Contact Form DB Cross-Site Request Forgery (2.8.31)
CVE-2015-1874
CWE-352
High
WordPress Plugin Contextual Related Posts Cross-Site Request Forgery (1.8.6)
CVE-2013-2710
CWE-352
High
WordPress Plugin Count per Day Information Disclosure (3.2.5)
-
CWE-200
High
WordPress Plugin CSS Plus Multiple Unspecified Vulnerabilities (1.3.1)
-
-
High
WordPress Plugin Custom Contact Forms Multiple Cross-Site Scripting Vulnerabilities (5.0.0.1)
-
CWE-79
High
WordPress Plugin Custom Sidebars-Dynamic Widget Area Manager Cross-Site Scripting (2.1.0.1)
-
CWE-79
High
WordPress Plugin Custom Website Data Cross-Site Scripting (1.0)
-
CWE-79
High
WordPress Plugin Design Approval System Cross-Site Scripting (3.6)
CVE-2013-5711
CWE-79
High
WordPress Plugin Dexs PM System Cross-Site Scripting (1.0.1)
-
CWE-79
High
WordPress Plugin Digg Digg Cross-Site Request Forgery (5.3.4)
CVE-2013-3258
CWE-352
High
WordPress Plugin DMSGuestbook File Manipulation (1.17.4)
-
CWE-99
High
WordPress Plugin Download Monitor Cross-Site Scripting (3.3.6.1)
CVE-2013-5098
CWE-79
High
WordPress Plugin Download Monitor Information Disclosure (1.6.3)
-
CWE-538
High
WordPress Plugin Download Shortcode Arbitrary File Disclosure (0.1)
-
CWE-22
High
WordPress Plugin Dropdown Menu Widget Cross-Site Request Forgery (1.9.1)
CVE-2013-2704
CWE-352
High
WordPress Plugin DVS Custom Notification Multiple Cross-Site Request Forgery Vulnerabilities (1.0.1)
CVE-2012-4921
CWE-352
High
WordPress Plugin DX-Contribute Cross-Site Request Forgery (1.2.0)
-
CWE-352
High
WordPress Plugin Easy Coming Soon Cross-Site Scripting (1.6.2)
-
CWE-79
High
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Multiple Security Bypass Vulnerabilities (2.1.10)
-
CWE-264
High
WordPress Plugin Easy Plugin for AdSense Cross-Site Request Forgery (6.06)
CVE-2013-2702
CWE-352
High
WordPress Plugin Editorial Calendar Multiple Vulnerabilities (2.6)
-
CWE-264
High
WordPress Plugin EELV Newsletter Cross-Site Scripting (3.3.0)
-
CWE-79
High
WordPress Plugin Eshop Magic Arbitrary File Disclosure (0.1)
-
CWE-22
High
WordPress Plugin Facebook Members Cross-Site Request Forgery (5.0.4)
CVE-2013-2703
CWE-352
High
WordPress Plugin Featured Post with thumbnail Unspecified Vulnerability (1.4)
-
-
High
WordPress Plugin File Uploader Arbitrary File Upload (1.1)
-
CWE-434
High
WordPress Plugin FireStats Arbitrary File Download (1.6.5)
-
CWE-538
High
WordPress Plugin FireStats Cross-Site Scripting (1.6.4)
-
CWE-79
High
WordPress Plugin Flexible Custom Post Type Cross-Site Scripting (0.1.5)
CVE-2011-5106
CWE-79
High
WordPress Plugin Floating Tweets Multiple Vulnerabilities (1.0.1)
-
CWE-79
High
WordPress Plugin Form Builder Cross-Site Scripting (1.2.0)
-
CWE-79
High
WordPress Plugin FormGet Contact Form Cross-Site Scripting (5.3)
-
CWE-79
High
WordPress Plugin Formidable Forms-Contact Form, Survey, Quiz, Calculator & Custom Form Builder Multiple Unspecified Vulnerabilities (1.06.08)
-
-
High